chore: initialize repo structure and sync tooling

public/ + private/ layout, sync.sh for dual-remote push,
pre-push hook blocking direct public pushes, setup.sh for
fresh-clone bootstrap.

CHANGELOG.md

@@ -0,0 +1,3 @@
+# CHANGELOG
+
+_stub_

README.md

@@ -0,0 +1,12 @@
+# homelab
+
+Personal homelab running at lerkolabs.com. Proxmox hypervisor, 9 LXC containers + 2 VMs, 8 VLANs, 20+ self-hosted services.
+
+## Docs
+
+- [Services](docs/SERVICES.md)
+- [Network](docs/NETWORK.md)
+- [Infrastructure](docs/INVENTORY.md)
+- [Security](docs/SECURITY.md)
+- [Decisions](docs/DECISIONS.md)
+- [Runbooks](docs/RUNBOOKS.md)

docs/DECISIONS.md

@@ -0,0 +1,3 @@
+# DECISIONS
+
+_stub_

docs/INVENTORY.md

@@ -0,0 +1,3 @@
+# INVENTORY
+
+_stub_

docs/NETWORK.md

@@ -0,0 +1,3 @@
+# NETWORK
+
+_stub_

docs/RUNBOOKS.md

@@ -0,0 +1,3 @@
+# RUNBOOKS
+
+_stub_

docs/SECURITY.md

@@ -0,0 +1,3 @@
+# SECURITY
+
+_stub_

docs/SERVICES.md

@@ -0,0 +1,3 @@
+# SERVICES
+
+_stub_